Microsoft releases emergency patch for Windows 10 flaw
By MYBRANDBOOK
Microsoft has released a Windows patch for a security vulnerability that was prematurely disclosed earlier this week.
Details of the “critical”-rated bug were released on Tuesday as part of the software giant’s typical monthly release of security patches, what it calls Patch Tuesday. The bug exists in the latest version of Windows’ server message block, known as SMB, which lets Windows communicate with devices, like printers and file servers on the network and across the internet.
The security update addresses the vulnerability by correcting how the SMBv3 protocol handles these specially crafted requests.
A successful exploit of the SMB bug could allow an attacker to remotely run malicious code on any vulnerable computer.
Jamie Hankins, Head of Security and Threat Intelligence Research at Kryptos Logic, said some 48,000 internet-connected unpatched servers are vulnerable to exploitation. But the figure is likely to be far greater, as it doesn’t take into account all of the other vulnerable computers connected to those unpatched servers.
News of the bug prompted fears that attackers could launch “wormable” attacks that spread rapidly across networks, like the WannaCry attack in 2017. Now two days later, Microsoft has patches to fix the vulnerability for Windows 10 and Windows Server 2019, versions 1903 and 1909.
It’s not clear exactly what led to the inadvertent disclosure. Researchers at security firm Fortinet and Cisco released blog posts describing the vulnerability, but later removed references to the bug.
The patches are available through the typical update mechanisms, including Windows Update.
Customers who have already installed the updates released on March 10, 2020 for the affected operating systems should install KB4551762 to be protected from this vulnerability," Microsoft said on Thursday.
Nazara and ONDC set to transform in-game monetization with ‘
Nazara Technologies has teamed up with the Open Network for Digital Comme...
Jio Platforms and NICSI to offer cloud services to government
In a collaborative initiative, the National Informatics Centre Services In...
BSNL awards ₹5,000 Cr Project to RVNL-Led Consortium
A syndicate led by Rail Vikas Nigam Limited (abbreviated as RVNL), along wi...
Pinterest tracks users without consent, alleges complaint
A recent complaint alleges that Pinterest, the popular image-sharing platf...
BPE INDIA PVT. LTD.
EXATRON SERVERS MANUFACTURING PVT. LTD.
VVDN TECHNOLOGIES
BHARAT ELECTRONICS LTD.
Icons Of India : B.V.R. Subrahmanyam
A 1987 batch (Chhattisgarh cadre) Indian Administrative Service Office...
Icons Of India : AMIT CHADHA
Amit Chadha serves as the CEO and Managing Director of L&T Technology ...
Icons Of India : Arundhati Bhattacharya
Arundhati Bhattacharya serves as the Chairperson and CEO of Salesforce...
NPCI - National Payments Corporation of India
NPCI is an umbrella organization for operating retail payments and set...
DRDO - Defence Research and Development Organisation
DRDO responsible for the development of technology for use by the mili...
PFC - Power Finance Corporation Ltd
PFC is a leading financial institution in India specializing in power ...
Indian Tech Talent Excelling The Tech World - PADMASREE WARRIOR, Founder, President & CEO - Fable
Padmasree Warrior, the Founder, President, and CEO of Fable, is revolu...
Indian Tech Talent Excelling The Tech World - Sundar Pichai, CEO- Alphabet Inc.
Sundar Pichai, the CEO of Google and its parent company Alphabet Inc.,...
Indian Tech Talent Excelling The Tech World - Anirudh Devgan , President, Cadence Design
Anirudh Devgan, the Global President and CEO of Cadence Design Systems...